Questions tagged [authentication-authorization]

Use it for the user authentication/authorization on Drupal core or third-party modules.

Filter by
Sorted by
Tagged with
17 votes
2 answers
26k views

Understanding Drupal's session management and user authentication

I have a requirement to replace the default user authentication with the authentication of a central server, i.e., the SSO server. By debugging Drupal, I learned that all the session management ...
AjitS's user avatar
  • 10.9k
2 votes
2 answers
2k views

How do I check the logged-in user username/password/role using a function to validate them?

I am allowing users to register an account on my site. They get a specific role using user_save(). When they log in for the first time, I have to verify the login credentials. Is there a function ...
Hitesh's user avatar
  • 576
4 votes
1 answer
2k views

Magento + Drupal SSO (Single Sign On) [closed]

We are looking to build a new website which would make use of 2 web applications: Drupal and Magento. Drupal will be used for corporate website while Magento will serve as a web shop. One of the ...
Kenny's user avatar
  • 171
3 votes
2 answers
800 views

What are the differences between the various OpenID widgets available?

There seems to be several different widgets for providing easer registration and login. I'm curious how they work and what the difference between them are? For example, there is the OpenID selector, ...
Adam S's user avatar
  • 5,031
1 vote
2 answers
5k views

Create a new user in LDAP, not wherever Drupal normally creates it

We have an already existing LDAP of users, that we wish to use for our new site. Amazingly, the login seems to be only finding the users we want it to, and not the users we don't. We have to figure ...
AlbeyAmakiir's user avatar
9 votes
2 answers
5k views

How do I configure the Services OAuth sub-module?

The Services module is about to release its new 3.0 version for both D6 & D7. There's an OAuth sub-module to Services that adds a new OAuth UI within the Services configuration UI. Does anyone ...
Blake Senftner's user avatar
7 votes
2 answers
1k views

Drupal 7 and Open ID

How does this Open ID module work in Drupal 7? I would expect something more or less the way StackOverflow and all these StackExchange websites work: you pick up your logging provider, like Google or ...
Marcos Buarque's user avatar
6 votes
1 answer
537 views

Automated login with LDAP always returns error

I have successfully setup LDAP module to authenticate users (and create new users). This is done through manual login form. Now I'm trying to enable automated single sign-on, but with no luck. I ...
Dubya's user avatar
  • 111
6 votes
1 answer
3k views

Drupal reuses its hash salt

The instructions in default.settings.php say This variable will be set to a random value by the installer. All one-time login links will be invalidated if the value is changed. Note that if ...
beth's user avatar
  • 9,087
5 votes
1 answer
645 views

Forcing OpenID login instead of Drupal own authentication

Is there a way to force the users to use OpenID (e.g. Google, Facebook, Twitter) and not use Drupal's internal authentication?
alexus's user avatar
  • 332
5 votes
1 answer
5k views

Drupal 7 Single Sign On possibilities with the Domain Access Module

The background: We (currently) have 2000 domain names pointed at a single IP. Drupal inherently has the ability to use multisite, but for our particular Drupal 7 install we use a module named Domain ...
ehime's user avatar
  • 181
3 votes
2 answers
530 views

Should Drupal 6 be considered insecure?

After reading the post about linkedin on IT security and this issue I would think that having a default Drupal 6 installation without, for example, the phpass module should be considered quite ...
mojzis's user avatar
  • 2,501
2 votes
1 answer
293 views

how could the global $user be different between the Drupal interface and Services module?

If i do: hook_node_view($node, $view_mode, $langcode) { global $user; var_dump($user); die(); // i get the correct dump of the current pre-authorized user } HOWEVER, ...
E.A.T's user avatar
  • 374
1 vote
1 answer
238 views

Users that exist only on slave cannot login

Once I've installed bakery, users that exist only on the slave site can no longer log in. Everything else is working perfectly. Is this by design?
chim's user avatar
  • 1,117
1 vote
2 answers
3k views

How to redirect particular page after login via social networking site?

In my Drupal site I have placed a link in checkout page which takes to user/login. On successful login it redirects back to checkout page. For this I have used ?destination=checkout in the url. I have ...
Vamsi's user avatar
  • 2,116
1 vote
1 answer
726 views

How do I edit the response of successful register.json?

How can you edit the Services' json response of successful register.json to include the user's OR system's auto-generated password, plus any token? I've tried a variety of combinations of the ...
E.A.T's user avatar
  • 374
0 votes
1 answer
68 views

Bakery doesn't pre-sync accounts

I want to use the Bakery module to login and synchronize users, but I am not able to synchronize existing accounts. Users that exist only on slave cannot login confirms Bakery doesn't provide pre-sync ...
visabhishek's user avatar
  • 1,336
-1 votes
1 answer
1k views

Service request with OAuth (Invalid signature error)

I'm making a service request(POST) with curl and OAuth signature. I have created a signature with the following code: $signature_method = new OAuthSignatureMethod_HMAC(strtolower('SHA1')); $...
adevms's user avatar
  • 131